^esT 



©Copy 



per 



WORLD INTELLECTUAL PROPERTY ORGANIZATION 
IntematioDal Bureau 




INTERNATIONAL APgUpVTION^PqEUSHED UNDER THE PATENT COOPERATION TOB^XX^qt^C^. 



(51) International Patent Clas^cation ^ : 
G06F 7/D2, H04L 9/32 



Al 



(11) Internatioiial Pnblication Number: 
(43) Intmiatbiial Publication Date: 



WO 95^5522 

8 June 1995 (08,06.95) 



(21) International Application Number: PCT/US94/ 13360 

(22) International FlUng Date: 18 Nomnber 1994 (18.11.94) 



(30) Priority Data: 
08/160,938 



2 December 1993 (02,1253) US 



(71) Applicants: SCHKRIF., Drew [US/l^l; 201 West Lake Roe- 
sign^ Road, Snohcnnisb, WA 98290 (US). NfARTONICK. 
Michad [US/US]; Suite 240, 765 Wesley Street, Ailington, 
WA 98223 (US). LEVI, Dean, F, [US/US]; 5210 - 122nd 
Street Southeast, Everett, WA 98208 (US). 

(71)(72) Applicant and Invoitor: JONES, Robert, F. [US/US]; 
1701 - 121st Street SoDdieast I^C204, Everett, WA 98208 
(US). 

(74) Agent: KINDNESS. Gaiy, Sj; Qiristensen, O'Coanor, Johnson 
& Kindness, Suite 2800, 1^ Fifth Avenue, Seatde, WA 
98101 (US). 



(81) Designated States: AM, AT, AU, BB, BG, BR, BY, CA, CH, 
CN, CZ, DE. DK, EOE, ES, H, GB, GE, HU, JP. KE, KG, 
KP, KR, KZ, LK, LR, LT, LU, LV, MD, MG, MN, MW. 
NL, NO, NZ, PL, FT, RO, RU, SD. SE, SI, SK, TJ, TT, 
UA, UZ, VN, European patent (AT, BE, CH, DE, DK, ES, 
FR, GB, GR, IE, IF, LU, MC, NL, FT, SE), OAM patent 
(BF, BJ. CF, CG, a, CM, GA, GN, ML, MR, NE, SN. TD, 
TG),ARIPO patent (KE. MW, SD, SZ). 



Published 

With intematUmai search report, 

B^fiyre the expiration of the time Omit fi>r amending the 
claims and to be republished in the event cfthe receipt of 
amendments. 



(54) Title: DIGITAL DATA VERIFICATION SYSTEM 



COUPVTZB 




PSBIFBSBU 
COMPUntR 




FSRIPBSRAL 
COMPVTSB 











cstrmi 



UTC 



(57) Abstract 

A computer file verifier for verifying conqmter files as ambentic is provided. The conqmtcr file verifier is inq)lemented on a mnlti- 
computer system inchidtng one or more peripheral computos (12), a ccimal compute (10) indwting secured memoiy. and an intoface 
network (16) mtemnmecttng fiie c ompute i s . Tbe peripheral compoteis (12) are used to create computer files (24). If a oonqmter file (24) 
is to be later verified, a peripheral computer (12) ge ner a tes a fingeiprim of tbe computer file (24). The fingeiprint is then stcned m fiie 
secured memory of the central com pute r (10). To verify tbe contem of tlie file, tbe perq>heral concqmter (12) regenerates die finge^nim 
and tbe regenerated fingeiprint is compared to tbe fiiigeiprim stored on tbe central computer (10). If die fingerprints match, die content of 
die computer file is verified as unaltered, tbe date and time of aeatioo and tbe auibor of die computer file (24) is preferably stored in the 
secured memory of die central cooqwter (10) as well, so diat tliis information can also be verified. 
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DIGITAL D AT4 VERIFICATION SYSTEM 
Fidd of the Inveiition 
This invention relates to verifying digital data and, more particulariy, verifying 
the autlienlicily of digital computer files. 
5 Background of tfie Livention 

Demote the ease wiA which infimnadon can be created and stored on today's 
computers, computers are not used in many applications because there is no 
acceptable way to verify conqmter files. For exanq)le, in the medical pro&ssion 
plyadans maintain patient records, Le,, diarts, using nonerasable pen and.pq)er. The 
10 phy^dan initials and dates each entiy made in a patient's chart Because sudi entries 
cannot be altered without detection, they are considered authentic and tfaerefixre 
accqptaUe in judicial proceedipgs. Another exaiKq>le in winch pen and paper records 
are princqialfy used is techmcal and scientific researdt TypcaDy, a researcher 
maintaias a Tab notebook* to track testing and research developments. Eadi entry is 
15 dated and initialed These lab notebooks are conadcred admisable evidence to prove, 
for exan9>le, a date of invention or reduction to practice. As a result, to date, many 
medical, research and other records must be stored m liard copy" finnt Conqniter 
storage has generally been conadered unacceptable because;, in die past, electramc 
files have been too easy to alter witfunit d^ecdon. 
20 In the past, computers have been rdativdy large and cumbersome to use so 

that the inatnlity to use conqnxters for such purposes as storing vraifiable medical and 
research records has not been a very significant problem. However, con^niters have 
become nrndi easier to use and nmch more portable, and fiirther inqnxyvemeots are 
expected in the fiiture. According, the use of computers in areas where data 
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authmtictty is a lequiremGiit is tnoeasing^ dearable. ladeed, laptop, notebook and 
palmtop conqniters are now available and are ideal for creating patient diaits, 
recording research progress, and recording financial data and transactions. 

Unfortunately, there are no presently available computer data verification 
5 systems that provide an acceptable indication of authentid^ and vgadty. Thm are 
technique to make conqniter files noneditable, Le., read-only. For eicample, many 
conqniter programs indude read-onlty files tiiat contain inform^ 
Unfortunatdy, the read-<»ily security techniques presmtly available can be easSy 
defeated. An mherent problem with sudi systems is that because the read-only 
10 techniques can be eaaly defeated, the security of each computer storing inq)ortant 
files must be doseiy monitored so that no one is able to modify the files on the 
conQiuter. 

What is needed is a ample verification system that verifies the authenticity 
0«e., content, author, and date and time of creation) of conqmter files. The system 

15 should be inexpensive and shpuM not require dosefy monitoring t^ 

computers on wiudi the files are created and stored The present invention fidfiDs 
these and other needs as described in fiill detail herein. 

Summary of Ae Invention 
In accordance vrith tins invention, a system for verifying conqniter files as 

20 authentic is provided. The verification q^stem includes a central conqniter that can be 
accessed by a plurality of peripheral compiiters via an interface nrtworic. Users oeate . 
computer files via ibo petq[>heral computers, e.g., a dedctop personal conqmter, a 
laptop computer, a pabntop computer, Methods in accordance vnHh tfus 
invention are perfimned on the peiq)heral conqmters and the central computer to 

25 "fingerprint** a file after it is oreated Ibis vmy the file can be later verified to 
determme nAether the file has been altoed ance it was fingerprinted. Jn particular, 
after a user creates a file on a perq>heral con^iuter, tiie user can fixigerp^ 
lata- verification. To fingerprint a file, the peripheral conqniter first calculates a 
fingerprint using a tedunque Aat produces a fingerprint that is unique to the data 

30 contained in the file. Tl^ peiqpheral computer then accesses the central computer and 
the central conqniter stores the file fingerprint Later, to verify the content of a file 
stored on a peripheral conqmter, the fingerprint of tiie file is recalculated usiog the 
same techiuque. The recalculated fixigeqxrint is thai conq>ared to the fingerprint 
stored on the central conqmter. If tiie fiiigerprints matdi, the file is verified as 

35 unalta:ed. On tiie other hand, if the fingeqmnts do not match, then one knows that 
the file has either been altered or corrupted. 
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In accordance vnih fiirther aspects of the invention, vfben the file is 
C) fingerprinted, the file is also date and time stanq>ed In particular, the central 
conQHXter inchides a dock that provides the date and time at which the file is 
fingerprinted The date and time is tbm stored in the central conqniter along with the 
5 fingerprint The date and time is also stored along with the file on the pmpheral 
computer. Then, v^en verifying the file, ^ date and time stored vrith the file on die 
poipheral conqmter is verified along with the fingerprint by conq>aring the date and 
time widi that stored on the central conqniter. 

In accordance with fiirther aspects of the invention, the audior of the file must 
10 identify himself befi>re the file is fingerprinted. The central conqniter then keeps a 
record ofthe author alox^ with tiie fingerprint and date and time stan^ In 
this w^, the author of the file can be verified. In one preferred embodhnent, the 
author identifies Umsdf by entering a previously assigned password. The central 
computer verifies Ae password before fingerprinting and date and time stanq)ing the 
IS file. The fingerprint and date and time stamp are stored in a database assigned 
exchisively to tiie author user or subscriberX tiierehy m aintaining a record of tiie 
file*s author. 

Li accordance with fiirther aq;>ects of the invention, tiie fingerprinting of a file 
includes calmlating the cycfic redundancy chedc (CRC) value for the file. In 
20 accordance witii stOl fiirther aspects of tiie invention, the fingoprint also includes the 
aze of the file. 

In accordance with still fiirther aq>ects of the invention, the q^stem inchides 
the ability to store complete files on the central computer by downloadmg the files 
finom a peiq>heral computer. TUs way, the file can be deleted on tiie peripheral 
25 computer to free up memory, and then uploaded firom the central compute: when 
needed. Also, if a file on a perqihoal computer becomes corrupted, the original fil^ 
can be uploaded firom the central conqmter if it was previously stored on the central 
computer. 

As win be appreciated from tiie foregomg brief summary, a system fisr 
30 verifying con^niter files is provided by tins invention. A central oonqmter is used to 
store fingerprints of files created on various perq>heral conqyuters. To verify the 
content of a file as unaltered, the fingerprint of a file stored on a peripheral computer 
is recalculated and then compared to the fingerprint stored on the central computer. 
Ifthe fiiigeqmnts match, the content of the file is verified as uiialter^ The system 
35 also mdudes tiie ability to date and time stanqi files. The date and time stanq> is 
stored along with the fingerprint on the central conqmter so that tiie date and time of 
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oreationofihe file can be lata- verified The system also iodudes the ahilhy to record 
on the central compute' the file's author so that the author of the file can be voified as 
well By tightly mamtahmig the security of the central conqnxt^, the fingerprint, 
author^ and date and thne stan^) verification data are preserved. This vi^, despite lax 
5 security on numerous per^heral computers, ccmqniter files oeated on the perqihoal 
conqniter can be later verified In otho* words, a Ug^ security of data, on numerous 
co mpute rs is achieved by 8uiq>ly maintainmg the security of a an^e con^nit^, 
namely, the central conqjuter. As a result, a relatively low cost system fi^r verifying 
fte authenticity ^.e., content, author, and date and time of creation) of conqmter files 

10 is provided It will be finther q>predated that the invention also allows the 
downloading of files from a penpheral computer to the central conqmter so that the 
central computer can store a file fi>r later retrieval O-c, uploading) in case the file is 
either deleted or corrupted on one of the peripheral computers. As a result, 
conpjters can be used to create records required to have a high levd of authentidty 

15 and veracity such as patient medical records, research laboratory records, and 
financial records. 

Brief Description of tiie Drawing s 
The fi)iegoing Bspecta and many of the attendant advantages of this invention 
win become more readily qypredated as the same becomes better understood by 
20 re&rence to the fi>llawing detailed deso^rtion, when taken in coqunction with the 
accompanying drawingsi, yidieretn: 

HGURE 1 is a system block (fiagram of a multi-conqniter q^stem structure 
accordance with tite present invation; 

FIGURE 2A is a blodc diagram iOustrating the types of files, inrJii<ltng 
25 document files, stored on a perq)heral computer in accordance with tiie mvention, and 
FIGURE 2B shows a document file in more d^ail; 

FIGURE 3 A is a blodc diagram iOustrating the types of files, mduding 
subscriber databases, stored on a central computer in accordance with tiie mvention, 
and FIGURE 3B Aows a subsaiber database in more detail; 
30 FIGURES 4A-4D show a composite flow diagram jthistratrng in part how tibe 

invention operates; and 

FIGURE 5 contains a flow diagram illustrating in part the operation of a 
pei^>heral conqwter in accordance with the invention. 

Detaaed Description of tiiePrefenpedEmbodinient 
35 FIGURE 1 is a system block (fiagram of multiple conqmters configured and 

interconnected in accordance with the invention. The verification system mdudes a 
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central conqniter 10, muhtple p^heral conqmtm 12, and a umversal time dock 
(CnC)14, all intocoxmected via an interface n^workl6. The peripheral 
conqniters 12 are conqniters on vfbidi conqmter files are abated by an author ^e., 
user or subsoibar of the verification system). The peripheral conqmters 12 can take 
5 many forms, mchiding posonal conqmters such as desktop compute laptop 
conymters, notebook conqniters, or pahntop con^mters. In accordance i?nth tiie 
invention, after a file is oeated on a peripheral con^nxt^ 12, tiie file can be 
"fingorprinted," so that the contmt of the file can be vmfied as unaltered at a later 
time. £i particular, the peripheral computer uses a particular technique to genef^ 

10 fingerprint that is unique to tiie particular data stored in the file. The peiq)heral 
computer 12 thai accesses the central coniputa 10 via the inter&ce network 16 and 
the fingerprint is sUmd on the central computer. When verification of the file is 
needed, the pef^heral conqmter recalculates the fingerprint using the same technique, 
and the recalculated fingerprint is then compared to the fingerprint stored on the 

15 central conqmter. If tiie fingerprints matdi, the file content is verified as unaltered 
since the file was fingerprinted. 

The verification system provided by tiie invention could be ofiEered by a 
verification service company. For exanq)Ie, the service conq>aiiy would have the 
central conqniter 10 and would provide software fi>r various users or subsoibers fi^r 

20 use on their own computers, Le.,petq)heral computers 12. The per4)heral conqniters 
would access the central computer 10 via the inter&ce netvi^rk 16. For exanq>le, the 
inteifice network could incfaide modems on each of the peiq>hefal con^nxters^ a 
modem on tiie central ccmiputer, and a telq)hone network to interconnect tiie 
modems. The inter&ce network 16 could also be a commonly used wide area 

25 network. The verification service conq)any would tightly monitor the security of the 
central conqniter 10 so as to maintain the verad^ of file fipgerprints stored on tiie 
central conqniterlO. Ahemattvel^, a business having many computers ccndd 
inq>lement tiie data verification system shown in FIGURE 1 in-house. Thepeiq>hend 
conqnxters 12 would be conqyuters used throughout the buaness, and the central 

30 conqwter 10 would be a conqyuter tar verifying the files on tiie peiq>heral conqniters. 
The inteifiice iietwork 16 could then be some fi)rm of local area iietworic. 

In addition to fingerprintiiig files oreated on the perq>haral conqniters 12, the 
central conqnxter 10 preferably date and time stanips each file. This way, the date and 
time of creation, as well as the content of a file can be later verified. The central 

35 computer accurately and robustly tracks the date and time so that files can be property 
date and time stan^yed. In one preferred onbodiment, the central computer includes 
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an intanal dock and a battery badaip as is commonly availabie in todf^s computers. 
The central conqniter 10 periodically updates its internal dodc by compwAng its time 
with tbe universal time dodc 14, vAich maintains^ for example; Greoiwidi mean time. 
Preferabfy, the autfior of a file cannot gain access to liie central computer 10 
5 to have a file fingerprinted and date and time stamped imless the author properiy 
identifies himsel£ Thecntralconqputervmfiestfiattheauthorisauseror subscri^ 
of the verification system and then maintains a record of the author along v/bk the file 
fiiigerprint and date and time ^anq). In this way, the author of the file can be later 
verified. In one preferred raibodiment, this is accon4>lidied by asagning a unique 

10 password to each user or subscriber. The user nmst correct^ enter the password to 
gain access to the central conqmter 10. The central computer 10 stores a subscriber 
database for each user. When a file is fingerprinted and date and time stanq>ed fixr a 

^ particular user identified by their password, the file fingerprint and date and time 
stamp is stored in the subscriber database assigned to that user. As a result, the fil^s 

15 author is recorded, namefy, the user associated with the subsaiber^^ 

The central conqniter also preferably has the ability to store copies of files 
created on tiie perqiheral conqniters 12. In particular, a perq>heral conqniter 12 can 
download a copy of a file to tfie central ccnqniter 10 via the interfece network 16. 
This wigr, if a file is ddeted fium a per^iheial conqmter or if a file on the per^>henl 

20 conqmter is altered or comqited, the copy can be uploaded firom the central 

conqniter 10. ^ ^ 

FIGURES 2 and 3 Hhistrate the tj^ of files stored on tiie peiq)heral 
conqmters 12 and the central conqmter 10. The perqdieral computer 12 mci^Tdcs 
memory 18 that can be fi^rmed of any present^ av^lable memory or storage devices, 

25 e.g., random access memory (RAM), disc drives, laser discs, etc. As shown in 
FIGURE 2A, die memory 18 stores, among other things document files 22 and a 
program 20 referred to as the Digital Data Verifier Peripheral (pDW TheDDVP 
p rogr am 20 is iHi^amm edacconfing to the invention to work in coiju^ 
central con^uter to pnmde veiificalion of user created documents. A documerst 

30 file 22 is created by the verification system vpoa firigerprintirig a user created 
document 24 by qq[>endiiig a document activity log (DAL) 28 to the user created 
document 24. A document file 22 is shown in greater detail in FIGURE 2B. The 
docunient 24 is the coiiqmterfiteareated by the user to contain the data 27, and the 
document activity k^28 contains file identification infi)nnation 25 assigned to the 

3 5 document 24 and an ongoing record of activity 26 perfi>nned on the document file 22. 
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Upon creation by the verification system, the document files 22 are prefoably 
stored in a section of tlte memory 18 that is configured to be nonedttable, Le., a 
nonedit ardiive 30. The nonedit arduve provides a first level of security against file 
tampoing and, just as in^KMtan^, pre v en ts a user firom inadvertently altering a 
S fingerprinted file. The nonedit ardiive can be formed uang techniques presently well 
known in the computer arts area. Unfortunately, the nonedit attribute of the 
ardiive 30 formed widi present techniques can be eaaSy defeated by persons lugjily 
skiUed in computers, so that storing files m fhe nonedit ard^ 
su£Sdent levd of file verificatioa Accordingj^, in accordance with the present 
10 invention, a fingeiprint for eadi document is stored on the central conqniter 10 --tte 
security of which is hi^ily maintained — to provide an acceptable levd of file 
verification. 

FIGURE 3A shows the usage of memory 32 induded in the central 
computer 10. The memoiy 32 can be formed of any presmtly available memoiy or 

15 storage devices. A portion of the memoiy 32 is used to store a program 34 referred 
to as the I^gital Data Verifier Central (DDVCX vriuch is pn^grammed in accordance 
with the invention to provide file verification in coqunction with the DDVP 
pn>gram20. AooAier portion36 of the memoiy 32 stores subscriber databases 38, 
one for each subscaiber or user. The composition of a subscriber database 38 is 

20 shown in greater detail ffl FIGURE 3B. As sfaanwn, a subsoiber database 38 includes 
an account log 4p that stores subscriber information and a record of system usage,,, 
which can be used, for exan^le, for purposes of tnQtng the subscriber. A subscriber 
database38 also indudes document data42 and downloaded documents44. The 
document data 42 indudes a document record 46 for each user created document 24 

25 entered into Ihe voification system, ie., a document record 46 for each document 
file 22. The document records 46 indude file fingerprints, date and time stanq>s, as 
weU as other data as desoibed in detail hereinafter. The downloaded documents 44 
indude cofnes 48 of sdected document files 22 ^ored on a peripheral computer 12. 
The operation of .tiie DDVP program 20 and the DDVC program 34 is 

30 iOustrated by tiie flow dagrams shown m flGURES 4A-4D and FIGURE 5. In 
I»rticular, FIGURE 5 Hhistrates a portion of the steps of fhe DDVP pn>gram20 
performed on a peripheral conqniter, and FIGURES 4A-4D itbistrate steps performed 
by the comtmiation of the DDVC program34 and the DDVP progFam20, 
respectivdy on the centrdconymter and a perQ)herd computer. As seen for exanq>le 

35 in FIGUKE4A, the flow diagrams diown indude oval blodcs, sudi as the blodc SO, 
that ffldicate the start and end of a program; rectangular blocks^ sudi as the blodc 54, 
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tfaat iDiistrate an operational step; diamond blodcs, sudi as the ded&on diamond 52, 
Aat ind icate a decision step that determines v^ch subsequent steps are peifimned; 
and dg^-sided blocks, such as the page connector 58, \diich indicate that program 
flow is returning from or going to a portion of a flow diagram illustrated in another 
figure. 

FIGURE 5 illustrates the high levd operation of the DDVP program 20 on a 
p^q)hefal computer. When a user wants to perfinm one of the fimctions provided by 
the verification system, the DDVP program20 is started at the block 160. The 
program first detmnmes wfaediar or not the DDVP software has been installed, as 
indi ca t e d by tiie dedaon diamond 162. If the software has not been installed, it is 
installed as mdicated by the block 164 and tiim the nonedit archive 30 shown in 
FIGURE 2A is estabfished, as indicated by die blodc 166. the DDVP software is 
already mstaUed, or aftor installing the software as indicated by tiie blocks 164 and 
166, program control continues at the dedsion diamond 168, wfam a determmation is 
made vi^i^her tiie user wants to review a previously fingerprinted (FPed) 
documoit 24, Le., review a documoit file 22. 

If the user does not wish to review a previously fingerprinted document, a 
d^enmnation is Aen made at the dedson cfiamond 170 to query vrfiedier the user 
wants to fixigerprint a new document or verify, download or iq)load a previously 
fingerprinted document If die user chooses to fingerprint a new document, the user 
first selects the document 24 to-be fingerprinted, as mdicated The 
DDVP program tiien copies die sdected document24 to tfie nonedit ardnveSO, 
esta bl is he s a document ID number, and attaches a document activity log 28 to die 
document 24, so as to oeate a docunimt file 22, as indicated at the block 174. Next, 
the poqiheral coo^uterU contacts the central conqmtei: 10 via the inter&ce 
network 16, as indicated at tfie block 176. Program control then continues in 
FIGURE 4A, as mdicat e d by the page connector 178, to fingerprint (and date and 
timestaEq>)thefile^asliereinafierdesa3)ed. I^ at tfieded^on diamond 170, ite user 
instead chooses to verify, upload or download a previously fingerprinted document, 
Ibe step at fte Uock 180 is pofiirmed to allow the user to select the desired 
document file 22 by entering the file's identific a t i o n number. Tliereafter, contact is 
e st ablished with the central conqniter (mdicated at the block 176), and program 
control continues in flGURE 4A indicated by the page connector 178) to verify, 
i^load or download the selected file, as hereinafter desoibed. 

IC at the dedaon diamond 168, the user requests to review a document 
file 22, the steps 182^ 184, and 186 are performed. First, the user selects the 
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identification mmber ID# of the docume^ 

the blodc 182. The user is then able to review the docummt file 22 on a con^mter 
soreen of the per^hefal compatjeT and/or print the document file 22, as indicated by 
the block 184. This activity is recorded in the docizment activity log 28 of the 
5 document file 22, as indicated by the block 186. The user is then givra the option to 
odt the DDVP program, as mdirated by the decision diamond 188. If the us^ 
decides to exit the DDVP program, the program is tmninated at the block 190. On 
the other hand, if the user does not wish to terminate the DDVP program, program 
control loops bade to the dedaon diamond 168, ^^lere die user is again given the 

10 choice to review a fingerprinted document 

The startixig of the DDVC program 34 on the central conqmter 10 be;^ns at 
the block 50, as shown in FIGURE 4A. Operation begins ivxtii the steps 52, 54, and 
56 to iTfflffltflwi the dock on tlie central conqniter and to detemune whether a new user 
has come on line. At the dedaon diamond 52, a detemuiuition is made as to ^Hietfa^ 

15 fte central conqmter dock should be recalibrated. As shown, pre&rabfy, the dock is 
recalibrated every midnight^ and vdieiKver a power interruption, system 
reinitialization, or system tampering occurs. If recalibration is needed, the dock is 
recalibrated as indicated by the block 54. In one pre f erred embodiment, the dodc is 
calibrated by contacting a umveisal time dock 14 via the intei&ce network 16, as 

20 shown in HGURE 1. The umversal tin^ dock 14 preferably mamtains Greenwich 
mean time (GMT). After recalibratmg tius doc^ 

is again performed. Unless some intervening event has occurred, the dodc wiD not 
need recafibrating and program control wiD continue at tfie dectston diamond 56. 
Sinnlarfy, if upon first execution of the step 52, the dock does not need recaSbrating, 

25 program flow continues at the dedaoncfiamond 56. 

At tiie dedsion diamond 56, a determination is made as to wfa^er a user at a 
petqiheral conqmter has just crane on line, Le., has established contact with ti^ 
central conqniter. A user commg on fine is iDustrated in FIGURE 4A by the page 
conneGtor 58, whidi is reached firom the previcHisly described steps shown in 

30 FIGURE 5, in particular, fitxm the page connector 178. If a detennmation is made 
that a new user is not on fine, program control loops back to the dedaon diamond 52 
to again d^ennine vt^idher the dodc needs to be recalibrated and then to detennine 
\dtether a new user has come on fine. This sequence rq>eats until a new user comes 
on line. When a new user comes on line, the hereinafter described log-in stq>s 

35 jyidicated by the blodcs 60-76 are peifi)rmed. Concurrently, program control loops 
bade to tiie decision diamond 52 to agam detennine i^ietho^ tiie dock needs to be 
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recalibrated and then to determine whether another user has come on line. In this 
manner, the central computer can support sevend usm ronc^^ The concurrent 
operation can be acconq)lished by etth^ time dialing a angle processor of the central 
conq)uter or by uang multiple processors in parallel, or by other tedmiques currently 
5 knownby those skilled in the con^nxta- art area. 

When at the deciaon diamond 56 a determination is made that a new user is 
on line, tiie log-in steps 60-76 are perfonned. Fir^ as indicated by the dedsion 
diamond 60, a determination is made as to \vfaether the perqiheral computer has 
successfidfy connected to the central computer. This detOTtiination mainly involves 

10 detennimng i?idi^her the connecdon b^ween the per^heral conqmtor 12 and Ae 
central conqniter 10, via the inteifice n^work 16, is proper. For exanq>le, if tiie 
intei&ce n^work includes modems and a telq>hone network, the test would indude 
d^ennimng ^dirther die modon Qipes and settings are com^^ If the connection 
is not vaSd, the user is lagged off at the hbck 78 m FIGURE 4B, vriudi is reached 

15 thrcHig^ the page C(Hinector62 in FIGURE 4A and the page connector 80 in 
FIGURE 4B. I^ on the other hand, the connection between the peripheral conqmter 
and central con^nxter is satisfactoiy, the central computer d^ermines whether correct 
DDVP software, roistered to a vafid user, is instaOed on Ae per^heral conqniter, as 
ip<fif^ytf^ by the dedston diamond 64. IT die DDVP software is not correct, e.g., an 

20 incorrect veraon, or if die software is not le^steied to a valid user, a message 
in<iinrt<»g such is sent to the pedpbersi conqniter, as indifaited at the block 66, and 
then die user is logged ofif at die blodc 78, vAidx is readied througjli the page 
connectors 62 and 80. 

On the other hand, if die DDVP software is detemuned to be proper at the 

25 dedsion ^flm^nrf 64, the user password is dien checked by stqis 68-74. The user is 
given diree chances to correctly enter dieir password. First, at the blodc 68, a counter 
#TRIES is set to zero. After die user enters dieir password, the cmtral con^mter 
^^■fmtfiftfl whether die password is conect, as indicated at die decision diamond 70. 
If the password is not correct^ the centrd computer increments the on^^ 

30 as mcficated at tfaeUock72. If die counter #rRIES is not yet equal to threes as 
detemmied at the dedaon £amond 74, then the user is allowed to reenter their 
password and the password is again cfaedoed at the dedaon diamond 70. the user 
is not able to enter dieir password correcdty widun three tries, the counter #IRIES 
reaches three and the detemunation at the dedsion diamond 74 causes program 

35 control to go to the block 76. At the block 76, a message is sent to the peripheral 
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conqnjtertoinfonntfaeuseroftl^incon^ The user is then logged off at 

the blo^ 78, reached throu^ the page connectors 62 and 80. 

ff the user is able to successfiiPy enter their password, pr ogr am control flows 
fiom the decision diamond 70 to FIGURE 4B as indicated by tiie page connectors 82 
5 and 84, respectiveiy in FIGURE4A and nGUR£4B. In FIGIIRE4B, a 
detCTunation is first made at the ded^on diamond 86 as to ^vrfiether the user wants to 
fingefprint or verify a document If tibe user requested to fingeqnint or verify a 
document, the hereinafier described steps shavm in FIGURE AC are perfisnned, as 
indiratftd fay the page coBnectCM* 88. On the ts/Aer hand, if the user does not want to 

10 fingerprint or verify a documoit, the hereinafier described st^s diown in 
FIGURE 4D are performed to either download or upload a document, as indicated by 
the page connector 90. After either perfi>nning the steps shown in FIGURE 4C or 
the steps shown m FIGURE 4D, program control returns to FIGURE 4B to execute 
the stq> at the decision diamond 92, where a detenmnation is made as to ^ndiether the 

15 user wants to tenmnate communication with the central computer. If the user does 
not want to terminate communication, program control loops back throu^ the 
blocks 170*, 172' and 174' or 170* and 180* to the dedsion diamond 86 to again 
deteimnie Tdiether the us^ wants to fingeiprint or voify a file or download or ^ 
afile. Thestq>s 17V, 172', 174' and 180* are identical to the steps 170, 172, 174 and 

20 180, shown m FIGURE 5. As desoibed with reference to FIGURE S, tiiese stqps 

4illow the user to select a file fi>r fingerprinting or fi>r verifymg,.j^loa£xig or 

downloadii^ ^ on the other hand, a detenmnation is made at the dedsion 
diamond 92 that the user wants to end cornnnmication, tiie user activity, e.g.,fteuser 
connect time;, is stOTed in the account log 40 of the subscriber database 38 shown in 

25 FIGURE 3B (m£c8ted at the block 94). The user is dien logged oflf at the block 78 
and the DDVP pr ogr am ccmtrol returns to FIGURE 5, as indicated by the page 
connector 95. The DDVP program confinues firom the page connector 179 in 
FIGURE 5 to tiiestq> at ^dedaon diamond 188, idieretiie user is ^ven the option 
yttVr fp rmnattn^ rtift TinVP p rftpr am or perfhrmmg fiirther activity^ as previously 

30 described. 

Jn FIGURE 4B, vAm a determination is made at the dedaon (fiamond 86 diat 
a user wants to fiiigeipiint (FP) or verify a docunient the stq>s 
are performed. Li particular, to fiiigerprint (and date and time stamp) a file> tlie 
stq)s 98 and 100 flowing from die page connector 96 are performed At the 
35 block 98, the peiq[>heral computer determines a fingerprint for a user selected 
document 24 umig a preselected tecfamque that produces a fir^geiprint umque to the 
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content of the document It will be recalled that the user selects the document to be 
fingerprinted at the block 172 m HGURE 5 (or at the block 172' in HGURE 4B). In 
one particular emboifiment, tiie fingerprint calculated at the block 98 in FIGURE 4C 
includes the c^cfic redundancy check (CRC) value of the file. The algorithm for 
5 m^ n^^i^g the CRC vahie of a file is vnSl known in the computer art and is commonly 
used 6>t data communicatiQn. The fii^erprint may also izichide the aze of the 
document^ as indicated in tiie block 98. 

Next, as jn^nrt^ at the bbck 100, the fingerprint and otfa^ information are 
stored in the subsaiber database 38 asagned to the user. In particular, a document 

10 record 46 as shown in FIGCIRE 3B is mated. The fixigerprint of the document, 
including the document's CRC and aze in one preferred emboc&nent, is stored in tUs 
record. The present date and time is also determined by reference to tiie dodc on the 
^yntra l rrwinpitftr^ and tMs date and time is stored in the document record 46 so as to 
date and time stanq) the document The identification number IP# established by the 

15 step at the Uock 174 mHGURE S (or at the block 174' mHGURE 4B) is also stored 
m the document record 46 to idendfy the record. As the block 100 indicates, tiie 
per^heral computer stores the document CRC, the document's aze, and the date and 
time in tiie document activity log 28 of the document file 24, as shown m 
FICjUKE2B. After performing tf^ stq> 100, fingerprinting and date and time 

20 fft<™pi"g of the file is complete;, and program control returns via Ae page 
connector IQZio flGUBE 4B at tiie page connector 88. 

After a user has fingerprinted one or more files, the user can then verify the 
file at a later point in tune. To verify a file;, the stqps 106-118 after ibe page 
connector 104 in HGURE 4C are performed. First, as indicated at the block 106, the 

25 central conqmter seardies the user's subscriber database 3 8 fiar the document selected 
by the user (at tite bk>dc 180 in FIGURES or at the block 180* in FIGURE 4B) and 
r^rieves tiie infimnation recorded in tfie corre^nding doounent record 46. The 
pcrq)heral computer tten recalculates the CRC and size of the document 24 ardnved 
on thepeqpliendcomiRiter, as in£catedt7l^ The peripheral conqmto- 

30 also retrieves die date and rime stanqp stored in the document activity log 28 attached 
to the document 24. The central computer then compares the CRC, file size, and date 
and time stamp determined by the peripheral compute: to the corresponding 
verification data stored in ibe subsaiber database 38 on the cmtnd computer, as 
indicated at tiie Uock 110. M the dedaon (fiamond 112, a query is then made as to 

35 vrfi^faertiie verification data match, the data match, tiie document 24 is valid 0.e., 
verified) and tins determinarion is recorded in the document activity bg 28 on the 
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pef^heral con^mter and in the document record 46 in the subsoiber database 38 on 
the central conqniter, as indicated by the block 114. Thereafter, program control is 
returned via the page connector 1Q2 to FIGURE 4B at the page connector 88. 

however, at the dedaon diamond 112 in FIGURE 4C, a detennmation is 

5 made Ibat the verification data do not match, the document 24 is invalid and a 
corresponding error message is logged in the document activity bg28 on the 
pefq)lieral computer and in the document record 46 in the subscriber database on die 
central conqniter, as indirflt*^ at tiie block 116. Thereafter, at the dedaon 
diaiiKmd 118,theusa-isg[ventiieoptiontoretryfileverificatioiL If the user requests 

10 to retry verification, program control loops bade to the blodc 106 to repeat Ae 
verification process. on the other hand, the user does not want to r^ry 
verification, program control returns via the page connector 102 to FIGURE 4B at 
the page connector 88. 

To download or iq>load a previoudy fingerprinted file, the steps shown in 

15 FIGURE 4D are performed. To download a file fiom a pa^heral compute to the 
centralcoixqmter, the steps bediming at tte page comiector 120 are pei^^ First, 
the document file 22 sdected by the user (at tiie blodc 180 in FIGURE 5 or at tiie 
block 180* in FIGURE 4B) is downloaded fiom the peripheral conqmter to the user's 
subscriber database 38 on the central computer, as indicated at the Mock 122. Next, 

20 the downloaded document file48 is cfaedced at the blodcs 124, 126 and 128 to 
detenmne wfa^her the dpvin[doadirig was successfiil, Le., error free. In particular, tiie 
file size and CRC of the downloaded document file 48 is calailated by the central 
computer at the Mock 124. The calculated data are then compared to the CRC and 
file size in tte document activity log 28 on the pexqphend conqmter, as indicated at the 

25 block 126. At the deciaon diamond 128, a detenmnation is made as to wfa^her the 
data match. If the data do iiot match, the file dowiiloadutig was uiisuccess^ Litius 
case, ti>e downloaded document file 48 is detoed firom the subscriber database 38 and 
an error m^^^^e^ is sent at tiie biodc 132 to infinm tl^ user that the downloatfing was 
mmirr^gfiil The user is Iben ^ven Ae opportunity to reliy tiie downloadi^ 

30 mdicated at tiie dedaon diamond 134. If tiie user deddes not to retry downloading, 
program control is returned via the page connector 136 to FIGURE 4B at the page 
connector 90. On the other hand, if the user wants to retry downloading, program 
control loops back to the block 122 to rq>eat the dcwnloacting proce^ 

I^ at the dedston diamond 128, a detenmnation is made that tiie CRCs and 

35 file sizes match, the file downloacfing was succcssfiil ^e., error fi:ee). Then, at the 
blodcs 127 and 129, the downloaded documoit file48 is verified to ensure that the 
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downloaded documeM is identical to the document that \^ 
date and time stanq)ed). This ensures that onty valid 0.e., vmfied) documents are 
downloaded and stored on the central computo-. At the blodc 127, the CRC, file size, 
and date and time m the downloaded document file 48 are conq[>aied to the 
S conesponding data in the document record 46 generated vAien the file was 
fingerpxinted. Jf the verification data do not match (detemuned at the dedaon 
diamond 129), fhe document file 48 is del^ fiom the subsoiber database and an 
enor message is soit, as hidicated at tiie block 132. The user is thm given a chance 
to retry downloading at the ded^ncfiamond 134, as previously desoib^ on the 

10 other hand, Ae verification data match, fte downloaded file is valid and this result is 
recorded m the document activity log 28 on tfie peiq>lieral oonqmter and in the 
document record 46 in the subsa3>er database38 on the central conqmter, as 
tp^irrnfpH at the block 130. Program control then returns via tiie page connector 136 
to FIGDKE 4B at the page connector 90. 

IS To upload a file firom the central conqniter to a peripheral conqn^ 

be^nmng at tiie page connector 136 in nGUR£4D are peffi>rmed. Krst, the central 
computer searches the user's subscriber database 38 fi>r the requested document 
(sdected at tiie block 180 in FIGURE 5 or at die block 180' m FIGURE 4B), and 
uploads the document file 48 to the peiqdieral computer, as i n dicated at the 

20 blockl38. The iqploaded document is then verified by con^^arii^ its CRC a^ 

that stored on the central conqniter. Jn particular, the file aze and CRC of tiie 
uploaded document are calculated by tite peripheral conqmter, as indic ated at the 
block 140. The central conyuter Aen compares the file size and CRC calcu lat ed by 
die pei4)hend conqniter to the file aze and CRC stored in the subscriber database 36 

25 on the central computer, as imficated by the block 142. At tiie dedaon damond 146, 
a d^enmnation is inade as to whether the data match. If the data matdi, a record of 
tiie mTrrfWPpfi iqdoading is recorded in the document record 46 m tiie subscriber 
database 38 on the central coi^puter and in the document activity k>g24 on die 
perqiheral con^Hiter, as indicated at the bbdc 148. Program control then returns via 

30 the page connects 136 to FIGURE 4B at tiie page connector 90. 

on the odier hand, at the dedaon (fiamond 146 a determination is made 
that tiie CRCs and file azes do iiot inatch, an error niessage is sent to ^ 
of this at the block 150 and the tqploaded document is dd^ fiom tiie peiq[)heral 
computer. The user is then given the chance to retry iq[>loadmg of the file, as 

35 indicated by the dedaon diamond 152. Jf flie user deddes to retry iQ>loadnig, 
program control loops back to the block 138 to restart uptoading of the file. ^ on 
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the other hand, the user decides not to leatten^t uploadmg of the file, program 
control returns via the page connector 13 6 to FIGURE 4B at the page connector 90. 

While the present^ pre£emd embodhnent of the mvention has been illustrated 
and described, it wiU be iqrpiedated that var^ 
5 departing fifom the spirit and scope of the invration. For exantple, vASLc the 
fingexprint of a file was described as the CRC and aze of the file, various oAer 
tftchniq^ies could be used to uniquely identify the content of the file. Furthennore, 
vAaie the fingerprint was sud to be stored on both the po^heral and central 
con^mter, it may be more dearable not to store the fingerprint on the pei:q>hend 

10 computerso that a user does not have access to this information. TMs would fiirther 
reduce the risk ofsomeone defeating tiie verification system. Furthermore, ^ndule the 
^stem has been entitled a distal verification system, h wiD be realty recognized by 
tiiose skilled in the dectronics art that the system could verify data stored in other 
fimns, sudi as analog fi)nn. Tlais, it will be understood that whhm the scope of the 

15 appended claims, various changes can be made in the spedficaify disclosed 
emixxfiments of the invention. 
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The eoabodiments of the invention in vMch an exdu^e propaty or privilege 
is daimed are defined as follows: 

1. A method ofverifyingconQjuterffles, including the 

(a) generatiiig a fingeipiint of a computer file that is to be verified 
at a later time, said fingeiprint being generated a preselected technique such that 
said fingerprint is uniqudy dictated by contents of said coniputer file; 

(b) storir^ said fingerprint in a secured monory; and 

(c) when verification ofsaid computer file is deared: 

ic-generatmg a fingerprint of said computer file usiiig 

said preselected tedmique; 

(jS) conq^aring said regenerated fingerprint to said stored 

firigerprint; and 

ifsaidr^enerated fingerprint is the same as said stored 
fingerprint, thai providhig an indication that said conqniter file has not been altered or 
corrupted since generating said stored fiiigeiprinty otherwise provi£iig an indication 
that said conqniter file has been altered or corrupted since generating said stored 
fingerprmL 

2. The niethod of claim l,vriierein said secured memory that stores 
fix^gerprint is part of a central computer, and p^ieretn said stq> of generatirig a 
firigeiprint is performed by a peiqihenil con^niter interconnected to said central 
computer, 

3. The method of daim2, said method induding voicing the date and 
time of creation of said computer file by performing steps induding: 

d^ennining a date and time to assign to said conqmto" file, said date and time 
indicative of vAen said computer file was created; 

storing said date and time along with said stored fingerprint in said secured 
memory of said central con^niter; and 

vAien veiifyir^ said conqniter file, reviewing said date and time stored in said 
secured memory . 

4. The m^hod of daim 3 , \dieretn data is stored in said conqnxter file in a 
digital foimat, fivtiier wherein said presdected tednuque of generatiiig conqmter file 
fingerprints includes calculating the cyclic redundancy check value of a conqmter file, 
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so that said stored fingerprint and said regenerated fingerprint include cyclic 
redundancy diedc values. 

5. The method of claim 4, p^ierein the us^ of said perq)heral conqniter 
nwtifttipg said method must first identify hunsd^ fiirther ^Tvfaerein said fingeqxrint is 
stored in said secured memoiy in such a way that said user can be determined wbm 
said verification of said conqniter file is deared, so that the author of said con^niter 
file can be verified. 

6. The mrthod of dahn 5, inchiding the optional step of storing a copy of 
said computer file in said secured memoiy, so that if said conqmter file is dd^ed, 
altered or corrupted, said copy of sdd computer file can be retrieved from said 
secured memoiy . 

7. The m^hod of claims, vdierein the user of said per^herd computer 
imliatir\g said mettod must first identify hwnscH^ fiirth^ "wfaeTem said fingerprint is 
stored in said secured memoiy in sudi a way that said user can be d^mnined when 
said verification of said conqniter file is deared, so tiiat the author of said conqiuter 
file can be verified. 

8 . The method of daim 2, vdierean data is stored in said conqniter file in a 
digitd fi>rmat, finther Didierein said preselected tedmique of genoating conqnxter file 
fingerprints incudes calculating the cycGc redundancy cfaedc value of a compi^ file, 
so that said stored fingerprint and said r^enerated fiqgefpriot tndude cyclic 
redundancy check values. 

9. Them^hodof daim2, vitoeinthe xiSGT of said perQ)heial computer 
imriaring said mediod mast first identify himsd^ fartbear wbear&a said fingeqirint is 
stored in said secured memoiy in sudi a way that said user can be determmed when 
said veiificaticm of said computer file is desred, so that the author of said computer 
file can be verified. 

10. The metfiodofdannl, wherein data is stored in said con^Hiter file m 
digitd fi>rmat, fiirth^ wiieretn said presdected tedimque of ge n era tin g conqnxter file 
fingerprints includes cdculating the cydic redundancy check vahie of a computs* file, 
so Aat said stored fingerprint and said r^enerated fingerprint include cydic 
redundancy chedc values. 
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11. The m^hod of daimlO, i^dierdn said preselected technique of 
generating computer file fingerpiints fiirther includes calculating the size of a 
computo- file, so that said stored fingerprint and said regen^ated fingerprint include 
fileazes. 

12. The method of claim 1, said method inchiding verifying the date and 
time of creation of said conqniter file bypofbrming stq)s including: 

d^enninmg a date and time to asagn to said conqniter file, said date and time 
indicative of lidien said computer file was created; 

storing said date and time along with said stored fingerprint m said secured 
monory of said central computet; and 

when verifying said conqniter file, reviewing said date and time stored in said 
secured memory . 

13. Am^hod of veiifying the date and time of creation of con]^mter files, 
said method induding the steps g£ 

(a) deterouning a date and time to assign to a conqnita* file that is 
to be verified at a later time, said date and time indicative of v^ien said con^niter file 
wasoeated; 

(b) storii^ said date and time in a secured memcny; and 

(c) yfbm verification of the date and time of oreation of said 
conqputer file is desired, reviewing said date and time stored in said secured memory. 

14. The method of claim 13, v^ierdn said date and time stored in said 
secured memory is also added to said conqnzter file, and said reviewing of said date 
and time includes: 

conq>aring said date and time stored in said secured memory and the date and 
time contained in said conqputer file; and 

if said date and time stored in said secured memory and said date and time 
contained in said conqputer file are the same, then providing an indication that said 
date and time contained hi said conqpruter file is a valid indication of when said 
ccmqniter file was created, otherwise providing an indication that said date and time 
contained in said conq[mter file is invalid. 

15. The method of claim 14, vdierein said secured memory is part of a 
central conqmter, and \dierein said stq> of adding said date and time to said conqputer 
file is perfimned by a pei^hend conqmter interconnected to sa^ 
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16. The method of dahn IS, wherein the user of said peripheral coiiq>uter 
hudathig said method must first identify himself fiirther i;dierdn said date ami tune is 
stored in said secured memory in such a wsy that said us^ can be d^ermtned wfam 
s^ verificatira of the date and time of creation of said con^niter file is deared, so 
that the author of said computo* file can be verified. 

17. A conqniter file verifier for a multi-coxiqmter system hichiding at least 
one peripheral conqnter, a central conqnit^ mduding secured memory, and an 
inter&ce n^work interconnecting said at least one perq>heral con^niter and said 
central conqniter, said conxputer file verifier comprising: 

(a) a cmtral conqmter program for execution on said central 

conqniter; 

(b) a petqiheral conqaiter program fi^r execution on said at least 
one peripheral computer, said central computer program and said perqjheral computer 
program verifying conqnjter files by perfimmng die stqis o£ 

(1) causing said per^heral computer to generate a 
fingeqirint of a computer file that is to be verified at a later time^ said fingerprint being 
generated by a preselected tedmique such that said fingerprint is uniqucfy dictated by 
contents of said conqniter fil^ 

(2) cauang said central conqmter to store said fingerprint 
in said secured memory of sud coitral conqputei^ and 

(3) \^^ien verification of said conqnite^ 

(0 cauang said perq>heralc(Hnputer to regenerate a 
fingerprint of said conqmter file usmg said preselected tedtmque; 

(10 caoang said central conqmter to con^are said 
regenerated fingerprint to sud stored fingerprint and 

ifsaid regenerated fingerprint is the same as smd 
stored fingerprint, canang said central conqiuter to provide an indication Aat ssid 
conqmter file has not been altered or corrupted ance ge nera tin g said stored 
fingerprint, otherwise cauang said central computer to provide an indicati^ 
computer file has been altered or coinjpted ance genendn^ 

18. The computer file verifier of daim 17, n^ierdn said central computer 
program and said per^heral conqputer program also verify the date and time of 
mation of said computer file by perfi)rniing the steps o£ 
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causing said central computer to detemiine a date and time to assign to said 
conqmterfile, said date and time indicative ofwhen said conqnit^ file was oe^ 

causing said central conqmter to store said date and time along with said 
stored fingerprint in said secured m^noiy; and 

vAim verifying said co^^nxte^ file, cauang said central con^niter to review 
said date and time stored in sud secured memory. 

19. The conqniter file verifier of daim 1 8» \dierein the user of said at least 
one peripheral conqniter initiating said peripheral con^niter program must first 
identify himsd^ finther li^ierein said central computer program causes said cmtral 
computo- to store said fing^print in said secured m^nory in such a way that said user 
can be detenmned when said verification of said conqniter file is de^^^ so that Ae 
author of said conpiter file can be verified. 

20. Thecon^nxterfileverifier of daim 19, vriioein said central conqmter 
optionaify causes said central computer to store a copy of said conqmter file in said 
secured memory of said central conqmter, so tiiat if said conqputer file is deleted, 
altered or comqpted, said copy of said computer file can be r^rieved Scorn said 
secured memory . 

21. The metiiod of daim 17, wherein data is stored in said conqmto' file in 
a distal fiirnutt, further wberda said presdected tecfamque of generating conqmter, 
file fii^gerprints includes calculating the cydic redundancy dieck vahie of a conqnxter 
filei, so tiiat said stored fiiigerprint and said regenerated fingerprint include q^dic 
redundancy chedc vahies. 

22. The method of dahn21, ^dierein said presdected tedmique of 
ge n erati ng conqniter file fingerprints finther indudes calculating Ae size of a 
computer file^ so that said stored fingerprint and said r^enerated fingerprint tndude 
fileazes. 

23. Theconqmterfileverifierof dahn 17, vriieretntheu 

one paq)heral computer initiating said per^heral conqputer program must first 
idmtify lumsd^ fiirtho* vdierein said central conqniter program causes said central 
compute to store said fingoprint in said secured memory in such away th^ 
can be d^ermined vfbm said verification of said conqniter file is desired, so that the 
author of said conqniter file can be verified. 
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24. A computer file date and time verifier fi>r a multi-con^mter system 
induding at least one peripheral computa*, a central computer including secured 
mCTOiy, and an intor&ce n^woik interconnecting said at least one peripheral 
computer and said central conqniter, said conqniter file verifier conqnising: 

(a) a central computer program for execution on said central 

ComputerLand 

(b) a perq>heral conqniter program for execution on said at least 
one peripheral computer, said central computer program and said peripheral computer 
program verifying the date and time of creation of computer files by pecfomung the 
stq>so£ 

(1) caumig said peiqiheral conqniter to call said central 
conqmterto imtiate date and time stanQ>mg of a computer file that is to be verified at 
alatertime; 

(2) cauang said central conqmter to d^ennine a date and 
time to asagn to said computa* file, said date and time indicative of wiioi said 
cQnomta- file was created; 

(3) causing said central computer to store said date and 
time in said secured memory; and 

(4) vAtea verification of tiie date and time of oeation of 
said conqmter file is deared, cauang said central conqniter to review said date and 
time stored in said secured memorjr. . 

25. The con^Riter file date and tin^ vaifier of daim24, wherein said 
perq)heral computer program causes said pefq>heral computer to add said date and 
time ^ored in said secured memory to said computer file, and said st^ of cauang said 
central conqniter to review said date and time in said secured memory conqnises: 

causing said central computer to compare said date and time stored in said 
secured memory and the date and time contained in said conqmt^ file; and 

if said date and time ^ored in said secured memory and said date and time 
contained in said computer file are the same, then causing said central computer to 
provide an indication that said date and time contamed in said computer file is a vafid 
indication of vAisa said computer file was oeated, otherwise cauang said central 
compute to provide an indication that said date and time contained in said computer 
file is invahd. 
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26. The compute file date and time verifier of claim 25, wfaeran the user 
of said at least one peripheral conqmter initiating said peripheral conqmter program 
must first identify Umsd^ fiirther wherein said central con^ntt^ program causes said 
central con^niter to store said date and time in said secured memory in nidi a way 
that said user can be determined i^ien said verification of the date and time of 
oeation of said computer file is desired, so that the author of said computer file can 
beverified. 
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